pdf spam

On Mon, 2007-07-02 at 11:02 -0400, Mitch Planck wrote:
> This past weekend we started getting PDF spam. 

I'm not big on posting "me too"s, but at least now
I know we aren't the
only ones seeing this; several of my users have reported
receiving
these. It's been going on for a couple of weeks now.

I briefly tried to work something up, but the only thing I
could find on
my system was a "pdftotext" program (part of the
poppler-utils package)
that doesn't seem to work very well.

--Greg




_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Two currently available to my knowledge. One is an
experimental plugin
for SA which is available from the admin at Rules Emporium.
From what I
have heard on the SA users list this seems to work well. The
other
approach is to supplement your clam database with the
definitions from
SaneSecurity. The down side is using third party virus
definitions.

Craig

Mitch Planck wrote:
>
> This past weekend we started getting PDF spam. The
message content is
> blank and the attached PDF has the spam content.
Sometimes the
> messages are blocked but it’s because of other issues
with the message
> – bad headers and such. I’m still running with SA 3.1.8
and Maia 1.02.
> Are there any plugins or updates that can handle this
type of stuff –
> scanning PDFs?
>
> Thanks,
>
> Mitch Planck
>
> Ias.net
>
>
------------------------------------------------------------
------------
>
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
>   
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

On July 2, 2007 08:02 am Mitch Planck wrote:
> This past weekend we started getting PDF spam. The
message content is
> blank and the attached PDF has the spam content.
Sometimes the messages
> are blocked but it's because of other issues with the
message - bad
> headers and such. I'm still running with SA 3.1.8 and
Maia 1.02. Are
> there any plugins or updates that can handle this type
of stuff -
> scanning PDFs?

On our spam filter (using amavisd-new, spamassassin, clamav)
we just had 
to send four or five of them through the sa-learn script,
and they're now 
being blocked by spamassassin.  Should be able to do
something similar 
with Maia.  Just train it to mark messages with just PDF
attachments and 
no text as spam.  

-- 
Freddie Cash, LPIC-2 CCNT CCLP      Network Support
Technician
School District 73                  (250) 377-HELP
[377-4357]
fcash-mlsd73.bc.ca
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

On Mon, 2007-07-02 at 15:15 -0500, Administrator wrote:
> One is an experimental plugin
> for SA which is available from the admin at Rules
Emporium. 

FWIW now, but we set these up and they are working fine. A
quick request
to the author gets access...http://rulesempo
rium.com/plugins.htm

-- 
Robert

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users